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REMARKS 

Claims 1-15 and 17-26 were pending prior to amendment. New 
claims 27-30 have been added. Claims 27-30 are supported in the 
specification; see, e.g., Figure 5 and the associated 
description. Therefore, no new matter is added. 

Claims 1-2, 4-7, and 9-26 stand rejected as allegedly being 
unpatentable over U.S. Patent No. 6,157,955 to Narad et al . 
C'Narad") . Claims 3 and 8 stand rejected as allegedly being 
obvious in view of Narad and U.S. Patent No. 6,484,257 to Ellis 
(^^Ellis") . 

In view of the amendments and remarks herein, the 
rejections are respectfully traversed. Reconsideration and 
allowance are respectfully requested. 

I. The Informalities 

Claims 15, 23, and 24 have been amended to correct the 
noted informalities, rendering the objection moot. 

II. The Rejection under 35 U.S.C. 112 

Claim 17 stands rejected as allegedly failing to comply 
with the written description requirement. Claim 17 has been 
amended to recite that "each additional mechanism configured to 
communicate with the classification forwarding device to perform 
an encryption-related procedure on the packet if the packet is 
encrypted." 
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Note that, if the packet is encrypted, it may be decrypted 
and then subsequently encrypted. Therefore, the encryption- 
related procedure may be encryption or decryption. The 
specification discloses that the decrypting forwarding elements 
have both encryption and decryption capabilities (see, e.g., 
page 7, lines 7-10 of the specification) . Therefore, both 
decryption and encryption are supported in the specification. 

III. The Rejections Under 35 U.S.C. 102(a) and 103 

Claim 1 

Claim 1 is patentable over Narad because the cited portion 
of Narad neither teaches nor suggests ^'determining at a first 
classifying forwarding element if a classification parameter is 
available for Internet Protocol security traffic that indicates 
a route for the IPsec traffic and classifying said traffic if 
available," or ''if said classification parameter is not 
available, and the IPsec traffic is encrypted then decrypting 
traffic in a decrypting forwarding element after said traffic 
has passed through said classifying element, and determining the 
classification parameter for the IPsec traffic at the decrypting 
forwarding element." 

The cited portions of Narad do teach that, based on 
classification, the packet may be decrypted. However, the cited 
portions do not teach the particular method recited in claim 1. 
For example, the cited portions do not teach "determining ... if a 
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classification parameter is available for IPsec traffic." Since 
the cited portions do not teach this feature of claim 1, they 
certainly do not teach the feature of claim 1 dependent on the 
determination ("if said classification parameter is not 
available../') 

Since the cited portions of Narad neither teach nor suggest 
these features of claim 1, claim 1 is patentable over Narad. 
Claims 2-5 

Claims 2-5 depend from claim 1, and are therefore 
patentable for at least the reasons stated above with respect to 
claim 1. 

Claim 5 

Claim 5 is patentable for at least the additional reason 
that Narad neither teaches nor suggests "forwarding other IPsec 
traffic included in a traffic stream with the IPsec traffic 
based on the classification parameter," as recited in claim 5. 

There is no such teaching in the cited portion of Narad. 
That is, there is no teaching that "other IPsec traffic included 
in the traffic stream with the IPsec traffic" (for example, 
other packets in the same stream) be forwarded based on the 
classification parameter for the IPsec traffic. 

For at least this additional reason, claim 5 is patentable 
over Narad. 

Claims 6-15 and 17-26 
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Claims 6-15 and 17-26 include features similar to claims 1- 
5, and are therefore patentable for at least the same reasons as 
stated above with respect to claims 1-5. 

New claims 27-30 

New claims 27-30 include additional features not taught or 
suggested by the references. 

For example, Claim 27 recites a plurality of decrypting 
forwarding elements in communication with the output of the 
first classifying forwarding element. Claim 27 further recites 
one or more second classifying forwarding elements in 
communication with one or more outputs of the decrypting 
forwarding elements. 

Claims 28 further recites one or more servers in 
communication with the output of at least one of the one or more 
second classifying forwarding elements, while claim 2 9 recites 
that the control element includes security information for the 
one or more servers. Claim 3 0 adds the feature that the 
security information includes one or more access tokens. 
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CONCLUSION 

In view of the remarks herein, claims 1-15 and 17-30 are in 
condition for allowance, and a notice to that effect is 
respectfully solicited. 

Enclosed is a 158.00 check for excess claim fees. Please 
apply any other charges or credits to Deposit Account 
No. 06-1050 . 

Respectfully submitted, 
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